Cloud Architect

About the Role

AWS Architect with hands-on experience in building Terraform modules and CI/CD experience using Terraform Enterprise. Responsible for designing end-to-end solutions for AWS Database products via Infrastructure as Code through Terraform.

Responsibilities

• Design end-to-end solutions for AWS Database products via Infrastructure as Code through Terraform
• Build reusable IaC modules, manage state, workspaces, remote backends, and environment promotion patterns
• Implement CI/CD pipelines integrating Bitbucket pipelines (or Bitbucket + runners) to automate Terraform plans/applies with quality gates and approvals
• Design secure, scalable, highly available AWS solutions across multi-account and multi-region environments
• Design least-privilege access, IAM roles/policies, permission boundaries, SCPs, cross-account access, and federation/SSO integration
• Implement AWS networking including VPC design, subnets, route tables, NAT/IGW, Transit Gateway, VPC endpoints/PrivateLink, security groups/NACLs, DNS (Route 53), and hybrid connectivity (VPN/Direct Connect)
• Ensure security and compliance through encryption (KMS), secrets management (Secrets Manager/Parameter Store), auditability (CloudTrail), and logging/monitoring (CloudWatch)

Qualifications

• Proven Terraform hands-on experience (7 years) building reusable IaC modules, managing state, workspaces, remote backends, and environment promotion patterns
• Strong AWS architecture expertise designing secure, scalable, highly available solutions across multi-account and multi-region environments
• Deep knowledge of AWS database services (e.g., RDS/Aurora, DynamoDB, DocumentDB, ElastiCache, OpenSearch) including HA/DR patterns, performance, and cost optimization
• Hands-on IAM expertise: designing least-privilege access, IAM roles/policies, permission boundaries, SCPs, cross-account access, and federation/SSO integration
• Strong AWS networking skills: VPC design, subnets, route tables, NAT/IGW, Transit Gateway, VPC endpoints/PrivateLink, security groups/NACLs, DNS (Route 53), and hybrid connectivity (VPN/Direct Connect)
• Strong CI/CD implementation experience integrating Bitbucket pipelines (or Bitbucket + runners) to automate Terraform plans/applies with quality gates and approvals
• Terraform Enterprise (TFE) experience: workspace design, policy-as-code (Sentinel/OPA where applicable), variable management, VCS-driven workflows, and run governance
• Security and compliance mindset: encryption (KMS), secrets management (Secrets Manager/Parameter Store), auditability (CloudTrail), logging/monitoring (CloudWatch), and alignment to enterprise controls
• Automation tooling experience: Ansible playbooks for configuration automation, orchestration, and post-provisioning tasks in hybrid/cloud environments (Plus)

Skills

• Automation
• Selenium
• Java
• Test automation
• Python
• Agile
• Cucumber

Pay

$89.00 - $89.00/hr

Schedule

This is a hybrid position in Chandler, AZ.

This response is AI-generated, for reference only.